Link to home
Start Free TrialLog in
Avatar of ChrisCranie
ChrisCranie

asked on

Any best way of setting up IT staff user accounts for AD and Exchange administration?

Hi,
Looking for some advice on this one...

We have an exchange 2003 server, and run a 2000 domain (shortly to be upgraded).

Or organisation isn't large - around 100 users, two IT staff and three servers. Is there a 'best way' to set up IT staff user/admin accounts? A couple of the issues I've come across are...

- Do IT staff user accounts have Administrator privileges, or do you use the administrator account when necessary?
- Should I create a designated account for connecting to user mailboxes (this is frequently required), or alter the permissions on the 2003 store to allow administrators to connect?

All insights appreciated!
Thanks,
Chris.


ASKER CERTIFIED SOLUTION
Avatar of martin_babarik
martin_babarik
Flag of Czechia image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of ChrisCranie
ChrisCranie

ASKER

Thanks. Good advice...



SOLUTION
Avatar of tigermatt
tigermatt
Flag of United Kingdom of Great Britain and Northern Ireland image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Useful tigermatt. How about exchange access though? We frequently have staff off sick, or out of contact and an important email has arrived in which needs to be forwarded to a colleague.

At present the IT staff have full access to mailboxes to be able to access and forward the email. Should we create a second exchange account for each IT staff member to access exchange, or is there a better way of doing this?
Sorry for entering your discussion as you asked Tigermatt, but I'd suggest to have one common mailbox for all IT staff, so everyone who works as It guy will have access to that mailbox and can individualy solve the problem (the one of many who is currently available to solve the problem and also you don't need to take care when somebody goes to vacation or so.)
But this mailbox should be used mostly for receiveing the requirements from other users, of course each member of IT staff should have his own mailbox and reply through this one.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Tigermatt: no prob at all, I'm not mixing here myself in the greed for points, you're the dominating expert here and I'm the one who adds something not so significant:-)
Hi All,
Thanks for the discussion. Ok, we've done the following but am having a problem with permissions...

1. Set up a separate Admin account for each IT staff member, usernames AdminCC, AdminDW.
2. Set up an Exchange admin account AdminEX for access to staff mailboxes

Through AD I've set a test user account to grant full mailbox access to the new account AdminEX. AdminEX is a member of Domain Users, All Staff and the IT Group and is not an administrator. However I still receive a message 'unable to expand the folder' when attempting to read the mailbox.

Anything I'm missing here?
Thanks,
Chris.
Can you check you carried out the procedure as per "Granting right to a specific mailbox" at http://www.petri.co.il/grant_full_mailbox_rights_on_exchange_2000_2003.htm?

-tigermatt
I stand corrected. Thought I'd done this, but now it's working ok. Thanks for your help all - points to follow.